CVE-2022-23132 in Zabbix
Riassunto
di MITRE • 13/01/2022
During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.